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What's new 


in OpenStack 


BUILT FOR 


openstack” Mirantis, 2012 


CLOUD SOFT WARE 


OpenStack 


Evolution and Marketplace 


BUILT FEA 


MIRANTIS openstack 


e First foundation board 
established 

e Launched on September 
18th, after 1+ year of 
preparations 

e Over $10M in sponsor 
funding raised 
O Second largest FOSS foundation 

after Linux 

e Hired executive director, 

COO and marketing 


Las director 


Mission: 


The OpenStack 
Foundation is an 
independent body 
providing shared 
resources to help achieve 


the OpenStack Mission by 
Protecting, Empowering, 
and Promoting OpenStack 
software and the 
community around it, 
including users, 
developers and the entire 


Ss 
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OpenStack Foundation: Governance 


MEET THE INTRODUCING THE 


TECH EUREN EE BOARD » DIRECTORS 


SOFTWARE | DEVI ELO ME N IE «D IRE PROTEGT, PROMOTE, & EMPOWER 


13 TOTAL MEMBERS - 


(ELECTED BY ACTIVE TECH CONTRIBUTORS) 


` 5 DIRECT ELECTS 
RAR 8 PROJECT TECH LEADS 
: (FROM THE 8 PRORECTS) — 


PER k SSG EE 300k| [Pamm cu wg 


a MEMBERS) 13 MEMBERS! 5,500 MEMBERS) 
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RedHat and SUSE announce OpenStack plans 


e Top three commercial Linux distros now support 
OpenStack 


e All three stick with the community release functionality 
e Key to long term OpenStack stability and enterprise 
penetration 


o CloudStack still only runs on Ubuntu 10.04 


e RedHat acknowledged Folsom as the first “enterprise 
ready" OpenStack release 
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Nicira Acquisition & VMWare's involvement 


"Commitment to Open vSwitch and Quantum component 
of OpenStack remains unchanged." 
Dan Wendlandt, Nicira: Quantum PTL 


Why did VMWare join OpenStack? 


e Nicira acquisition was a good opportunity 
e Send OpenStack positioning signals 

e Be able to complement” OpenStack 

e Competing with Citrix and CloudStack 
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In the near future ... look for 


e Work on Grizzly release begins at OpenStack 
summit 
e OpenStack investment increases 
from Dell, HP, Cisco, RackSpace 
e SDN heats up 
e Networking, Storage Vendors 
take on OpenStack roadmaps 
e Enterprise IT moves from pilots to production 
e Foundation elections January 2015 
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What's New in Folsom 


User Perspective 


BUILT FEA 


MIRANTIS openstad 


Folsom core projects 


MIRANTIS 


project name 
compute (Nova) 

object store (Swift) 
image service (Glance) 
identity (Keystone) 
dashboard (Horizon) 
networking (Quantum) 


block storage (Cinder) 


no. of Folsom blueprints 


48 
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General user/admin experience improvements 


e more consistent CLI 
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General user/admin experience improvements 


e more robust dashboard with support for new features 
(Duantum/Cinder) 
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General user/admin experience improvements 


e better instance status tracking (no more stuck in 
"deleting" state, etc.) 
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General user/admin experience improvements 


e 

e 

e 

e robust networking model: 
O create & manage nets in Horizon 
O create ip pools independently from other tenants 
O create virtual "ports" & "routers" 

e 

e 

e 
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General user/admin experience improvements 


O 
O 


O 


e convenient Glance image manipulation (via Horizon) 
o 
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General user/admin experience improvements 


e block live migration (no shared storage) 
o 
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General user/admin experience improvements 


e 
o 
e .new hypervisors 
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Walkthrough 


Changes in Core Components 


BUILT FEA 


MIRANTIS -— 


QUANTUM - a new networking platform 


e Provides a flexible API for service providers or their 
tenants to manage OpenStack network topologies 
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QUANTUM - a new networking platform 


e Presents a logical API and a corresponding plug-in 


architecture that separates the description of network 
connectivity from its implementation 
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QUANTUM - a new networking platform 


e Offers an API that is extensible and evolves 
independently of the compute API 
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QUANTUM - a new networking platform 


e Provides a platform for integrating advanced networking 


olutions 
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QUANTUM - a new networking platform 


e Provides a flexible API for service providers or their 
tenants to manage OpenStack network topologies 

e Presents a logical API and a P ra plug-in 
architecture that separates t K cription of network 


connectivity from its i entation. 


e Offers an API th RN. and evolves 
ndependepg Qn compute API 


e Pr ES platform for integrating advanced networking 
IONS 
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Quantum "bird's eye" view 


Advanced Cloud 
Networking Services 
Built on top of Quantum 
API 
OpenStack 


Cloud User 


OpenStack Application Programming Interface - API 


OpenStack Cloud OpenStack Object OpenStack Image OpenStack Computer: Pluggable backend 
Controller Cluster Storage: "Swift" Service: "Glance" "Nova" 
Open vSwitch 
Quantum 
Plug-in 


Plug-in X 
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Rabbit MQ based Message Queue (Enterprise Service Bus) 


source: http://openvswitch.org 


m 
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Core Quantum REST API 


Authentication and Authorization 


Pluggable Quantum Backend 


Quantum Cloud Network Fabric Plugin coua network 
A plug-in created by Vendor X Data Model 
a Gs | 


Cloud Networking Fabric 


Physical 


Software 


Physical 


Software 
Switch 


vSwitch 


Switch 


Switch 


source: http://openvswitch.org 


AS 
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Quantum Cloud Network Fabric Plugin cious Network 


A plug-in created by Vendor X Data Model 


Cloud Networking Fabric 


Software Physical Software Physical 
Switch Switch vSwitch Switch 


source: http://openvswitch.org 
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Core Quantum REST API 


Authentication and Authorization 


Pluggable Quantum Backend 
Quantum Cloud Network Fabric Plugin cioa network 


A plug-in created by Vendor X Data Model 
——————— ÀÁ] Ía[Ü — D A 


Cloud Networking Fabric 


Software Physical Software Physical 
Switch Switch vSwitch Switch 


source: http://ogenvswitch.org 


AS 
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Tenant connection needs - L2 & separation 


compute node compute node 


Pd 


\ 
compute node 
(another DC), 
\ 


IO a ui i a o a qu a a ee re Wa a a ee 
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Tenant connection needs vs hardware 


compute node 


compute node 


poe "A d 
| remote 
| HT | DC 
| || tunnel | 
nicira T 
I \ 
I V 
OPEN VSWITCH | 0 


T 


An Open Virtual Switch EECH EE j 
| compute node i 

- | (another DC), i 

= i pore Av 

L OpenFlow ' S " | 

íi vm | ‘vm; i 


IO a ui i a o a qu a a ee re Wa a a ee 
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Folsom - available plugins 


Linux Bridge 
OpenVSwitch 

Nicira NVP 

Cisco (UCS Blade + Nexus) 
Ryu OpenFlow controller 


NEC ProgrammableFlow Controller 
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OpenStack connectivity - Open vSwitch plugin 


e leverages OpenVSwitch software switch 
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OpenStack connectivity - Open vSwitch plugin 


e modes of operation: 

o FLAT: 
networks share one L2 domain 

o VLAN: 
networks are separated by 802.10 VLANs 

o TUNNEL: 
traffic is carried over GRE with different per- 
net tunnel IDs 
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OpenStack connectivity - Open vSwitch plugin 


o TUNNEL: 
traffic is carried over GRE with different per- 


net tunnel IDs 
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Open vSwitch plugin - bridges 


= mm m pm pm mm rm pm pm mm — mmm 


compute node 


single integration 
bridge "br-int" 


— ` mm æ æ — —— 


A m ` pm pm pm i pm pm em rm pm pm mm rm —— 


i a patch port leads to 
| a bridge which is 

| attached to a 

I physical interface 


= = = ` pm mm e e e mm mn pm mmm mm mm mn mn ef 
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Open vSwitch plugin - local VLANs 


pL m pm pm — mmm 


| \ 
| traffic separated by | 
, "local VLANs: | 


compute node 


LV 1,LV 2 


eee á- á- mm á — vm 
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Open vSwitch plugin - FLAT mode 


compute node compute node 


compute node 
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Local vs global traffic ID-s - FLAT mode 
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Open vSwitch plugin - VLAN mode 


compute node compute node 


compute node 
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Local vs global traffic ID-s - VLAN mode 
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Open vSwitch plugin - Tunnel mode 


compute node compute node 


compute node 
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Local vs global traffic ID-s - Tunnel mode 


openvswitch 


GRE: DT MM rail \ 


SR a NE PERS SEE EC RE ERR ERE PD 
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Tenant connection needs - L2 (revisited) 


compute node compute node 


Pd 


\ 
compute node 
(another DC), 


IO a ui i a o a qu a a ee re Wa a a ee 
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Dealing with multiple physical networks 


compute node 


DC - net DC - net remote tun. 
segment segment endpoint 
10.0.0.4 
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Dealing with multiple physical networks 


compute node 


I | 

i vlan range: | vlan range: 

| 100-400 ,^ 401-800 

| AN 

Na, at de e P Dm ` ven m m = = = = = 
AN 
ı tunnel ID 
| range: 

^" 50-600 


remote tun. 
endpoint 
10.0.0.4 


segment segment 
1 2 
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Tenant connection needs - L3 


TS P 
ka 


ROUTER/ 
NAT 
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Tenant connection needs - L3 


e manage IP configuration (including address ranges) 
Integrated from "Melange" project. IPAM is now a part of 
Quantum. Model able to maintain independent addressing 
for each network. 
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Tenant connection needs - L3 


e have a dhcp server 
dhcp-agent: aims to manage different dhcp backends. 
Currently supports only dnsmasq (just as old nova- 
network) 
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Tenant connection needs - L3 


e have multiple networks & create routing topology for 
them 


l3-agent: creates virtual routers and plugs them into 
different subnets 
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Tenant connection needs - L3 


e NAT traffic with external networks & floating IPs 
l3-agent: creates NAT-ed gateways to "external 
networks 
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Quantum - plugin & agent summary 
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EQUILIBRIUM - software load balancing agent 


e provides load-balancing IP 
address with multiple 
Instances as a backend 


e available drivers: ja m 


O  haproxy 


Node 2 
hi 
C witch > 


tenarn network 


O Cisco ACE ; | | ms 
O F5 BigIP : = 


e integration with Quantum 
ongoing 
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Quantum vs nova-network 


MIRANTIS 


multi-host 
VLAN networking 


Flat( DHCP) 
networking 


Tunneling (GRE) 
many bridges 
SDN 

IPAM 


dashboard support 


security groups 


NOVA-NETWORK 
Yes 


Yes 


Yes 


No 
No 
No 


Yes 


No 


Yes 


QUANTUM 
No 


Yes 
Yes 


Yes 
Yes 
Yes 
Yes 


Limited - no floating 
IPs 


Limited - only with 
non-overlapping IP 
pools 
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Cinder - new volume service 


e nova-volume codebase, but under a separate core project 
e decoupling from other nova-* components to facilitate 
development 
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Cinder - new volume service 
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Cinder - architecture 


Cinder API 


Cinder Scheduler 


INI és B Cinder Volume 
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Cinder - new features in Folsom 


e creation of volumes from Glance images (with copy-on- 


write mechanism) 

€ new storage backends: 
o NetApp /w NFS 
o Zadara VPSA 
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Nova improvements & new features 


e block live migration for Xen & KVM 
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Nova improvements & new features 


e new host aggregate features 
o aggregate data exposed to scheduler ("HostAggregate’ scheduler filter) 


e 
O 
O 
e 
e 
O 
O 
e 
© 
e 
e 
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Nova improvements & new features 


O 
e improved XenAPI support 
o boot from volume 
o live migration (block + shared) 


e 

e 
O 
O 

e 

© 

e 

e 
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Nova improvements & new features 


e 
O 
e 
O 
O 


e better instance state tracking 


O 


O 
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Nova improvements & new features 


e 

O 
e 

O 

O 
e 


e new hypervisor drivers: 
o the revival of HyperV support 
o LPAR driver (IBM ) 
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Nova improvements & new features 


e 
O 
e 
O 
O 
e 
e 
O 
O 
e project-specific instance flavors 
8 
e 
e 
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Nova improvements & new features 


independence from the EC2-style metadata server (config drive) 
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Nova improvements & new features 


e 
O 
e 
O 
O 
e 
e 
O 
O 
e 
e 
e better nova-API scalability (moved to multiprocess implementation) 
e 
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Nova improvements & new features 


e 
O 
e 
O 
O 
e 
e 
O 
O 
e 
8 
e 
e placement of instances directly on LV-s (LVM) (up to 50% on 1/0) 


MIRANTIS © Mirantis, Inc, 2012. All rights reserved. 


Horizon improvements & new features 


e New Uls: 
o Cinder 
o Quantum 
Transition from CSS to LESS 
Swift - support for pseudo-nested objects 
New provisioning wizard 
New resource browser 
Programmatic workflows 


Numerous user experience improvements: 
speed 

multi-step workflows 

glance upload from URL 


O O E E 


cross-browser support 
O better error messages 
e Creating & manipulating tenants, quotas 
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Horizon improvements & new features 


e New Uls: 
o Cinder 
o Quantum 
Transition from CSS to LESS 
Swift - support for pseudo-nested objects 
New provisioning wizard 
New resource browser 
Programmatic workflows 


Numerous user experience improvements: 
speed 

multi-step workflows 

glance upload from URL 


O O E E 


cross-browser support 
O better error messages 
e Creating & manipulating tenants, quotas 
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Quota summaries 


Overview 


Logged in as: admin Settings Sign Out 


Quota Summary 
Used of Available Instances 


Used of Available vCPUs 


Used MB of MB Available RAM 


Select a month to query its usage: 
September zl 2012 


Active Instances: - Active RAM: - This Month's VCPU-Hours: 0.00 This Month's GB-Hours: 0.00 


Usage Summary Download CSV Summary 


Instance Name VCPUs Disk RAM Uptime 
No items to display. 


Displaying 1 item 


MIRANTIS © Mirantis, Inc, 2012. All rights reserved. 


Instance launch menu /w tabs 


| Details | Access & Security Networking Volume Options Post-Creation 


Instance Source 


Image 


Select Image 


Instance Name 


Flavor 


m1.tiny 


Instance Count 
1 


>S 


MIRANTIS 


Specify the details for launching an instance. 


The chart below shows the resources used by this project 
in relation to the project's quotas. 


Flavor Details 


Name 

VCPUs 

Root Disk 
Ephemeral Disk 
Total Disk 


Project Quotas 
Number of Instances (0) 


Number of VCPUs (0) 


Total RAM (0 MB) 


m1.tiny 
1 

0 GB 

0 GB 

0 GB 


Displaying 7 items MB 


10 Available 
20 Available 


51,200 MB Available 
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Flavor editing 


Flavors — 


e Flavor Name VCPUs RAM Root Disk Ephemeral Disk ID Actions 


m1.tiny 1 512MB 0 0 Edit Flavor 
m1.small 1 2048MB 20 0 Edit Flavor 
m1.medium 2 4096MB 40 0 Edit Flavor 


= m1.large 4 8192MB 80 0 Edit Flavor 


m1.xlarge 8 16384MB 160 0 Edit Flavor 


Displaying 5 items 


m 
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Image creation 


“SS 


MIRANTIS 


Create An Image 


Po 


Image Location 
http://example.com/image.iso 

Format 

Minimum Disk (GB) 


Minimum Ram (MB) 


Public 


Description: 

Specify an image to upload to the Image Service. 
Currently only images available via an HTTP URL are 
supported. The image location must be accessible to 
the Image Service. Compressed image binaries are 
supported (.zip and .tar.gz.) 

Please note: The Image Location field MUST be a 
valid and direct URL to the image binary. URLS that 
redirect or serve error pages will result in unusable 
images. 


Cancel Create Image 
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Tenant/user/quota workflow 


Add Project 
Project Info Project Members Quota 
Name i : 
From here you can create a new project to organize users. 
Description 


Additional information here... 


Enabled 
M 
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Keystone improvements & new features 


e draft of the 5rd version of Keystone API 
e PKI support 


O Signed tokens to reduce calls to keystone service 
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Keystone in Essex 


{username: foo, 
tenant: bar, 
expires: 2359:30Sep2012, 
roles: [admin]) 


(2) token passed 


(1) token issued to the user 
in user req. 


(3) 


revalidate 


nova-api keystone 
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Folsom - PKI in keystone 


{username: foo, 
tenant: bar, 
expires: 2359:30Sep2012, 
roles: [admin]) 


(2) encrypted 
token passed to 
service 


(1) encrypted token issued to user 


decrypt & 
revalidate 


nova-api keystone 
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GLANCE improvements & new features 


e new API (V2) 
e private storage with the Swift backend 


e python-glanceclient: a new client Library 


O supports vi + v2 API versions 


e image replication tool (‘glance-replicator’) 


O now a simple script to be worked on in Grizzly 

e pluggable db driver (now possible to support 
other than sglalchemy via custom python 
module) 
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SWIFT improvements & new features 


e improved data replication 


O configurable: zoning vs "best placement" 


© 
O 
e 
O 
o 
O 
MIRANTIS 
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SWIFT improvements & new features 


O 


e out-of-the box monitoring with statsD 


O deep insight into cluster health 
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SWIFT improvements & new features 


O 


e metadata I/O optimization for containers & accounts 


O configurable: preallocated vs fragmented space for sqlite files 
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SWIFT improvements & new features 


® 

O 
© 

O 
e 

O 


e new, faster ring format: 


O serialization: moved from pickle to json 
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Deployment Tools 


Upgrade Hints and Resources 


BUILT FEA 


MIRANTIS — 


Automation 


e Emerge of cloud deployment frameworks: 
Puppet & Chef modules for Openstack 

rapid development of Dell Crowbar 

SUSE cloud (commercial offering) 


Rackspace Alamo 


O O O 3) 


StackOps 
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Upgrade path 


Nova dependency upgrades of python libs 
flavors might need to be recreated if libvirt is used 
new rootwrap configuration 


idea of an “upgrade script" brought up on the mailing List 
indirect support of networking models from Essex 
possible lack of features (secgroups) in some deployment scenarios 
Cinder migration from nova-volume supported only after upgrade of Nova to "Folsom" first 
utility provided to copy user data 


frien la backward compatibility with Essex 
simple package upgrade & restart of services 
e rings wil be upgraded to the new format without a possibility to switch back 
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Upgrade path 


flavors might need to be recreated if libvirt is used 


e possible lack of features (secgroups) in some deployment scenarios 


mdi T —  — tege 
e 
e rings wil be upgraded to the new format without a possibility to switch back 
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OpenStack Essex 


NA < 
nova: Cloud Controller 
RA 


nova-api ies — 
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UI: horizon or CLI 
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Further information Part 1 of 2 


MIRANTIS 


Folsom: 


O 


http://wiki.openstack.org/releasestatus/ 


o  http://www.openstack.org/software/roadmap/ 
o  http//wiki.openstack.org/ReleaseNotes/Folsom 
Quantum: 

o  https//www.ibm.com/developerworks/mydeveloperworks/blogs/e955144d35-c4f0-4aa0-8844- 
497f3570090f5/entry/quantum folsom12?lang=en 

o  http://wiki.openstack.org/quantum-l3-firewalls-and-dhcps 

o  http7/cloudistic.me/ 

o — https://docs.google. 
com/document/d/1RqvZ50k60Dd19paKePHLHbKk1x1lN2fXSXyWuC9OUWl/edit?pli-1 

o  http//www.slideshare.net/sumit naik/summit-prepquantuml5modelsumit9 

o  http//www.sebastien-han.fr/blog/2012/09/25/from-nova-network-to-quantum/ 

o  http//www.sebastien-han.fr/blog/2012/09/28/quantum-plugin-comparison/ 

o  http//wiki.openstack.org/ConfigureOpenvswitch 
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Further Information Part 2 of 2 


e Glance: 

o  http//bcwaldon.cc/201 2/08/20/openstack-folsom-glance-overview.html 

o — https://docs.google.com/a/mirantis. 

com/document/d/1jPdgmQUzTuSt9iqcgPy74fbkzafCvqfOpvzRhwf2Kic/ 

o http://www. mail-archive.com/openstack@lists.launchpad.net/msg15804.html 
e Nova: 

o  http//wiki.openstack.org/HypervisorSupportMatrix 

o  http//www.sebastien-han.fr/blog/2012/07/12/openstack-block-migration/ 


e Keystone: 
o  http//adam.younglogic.com/2012/05/signed-authz-authn/ 
e Swift: 


o  http//swiftstack.com/blog/201 2/09/27/top-three-swift-features-in-openstack-folsom/ 
o  https//lists.launchpad.net/openstack/msg16188.html 
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